StudyByteLearn
← SC-100: Microsoft Cybersecurity Architect
SC-100 · MCRA MCSB and Zero Trust

Practice question 39 of 498 · medium

An inventory agent is intended to read stock counts, but its API credential can also delete inventory records. Which change most directly implements AI-4?

Choose the single best answer.

  1. A.Add pre-action logging while keeping the delete permission
  2. B.Apply only output content filtering without changing the API authorization
  3. C.Restrict the agent tool and downstream identity to the required read operations
  4. D.Add a system instruction asking the model not to delete records
Show the answer and explanation

✓ Correct answer

  • Restrict the agent tool and downstream identity to the required read operations

Independent tool and identity permissions enforce read-only scope. System instructions, logging, and output filtering do not remove the granted destructive API authority.

Read the source reference

Read and review here, or open the app to practise and save your results on this device.

Unofficial study material. Not affiliated with or endorsed by Microsoft. These are original learning questions, not actual exam questions. Product capabilities and exam objectives can change; verify current Microsoft documentation. Practice scores do not predict or guarantee an exam result.